Verifiable Service Policy Implementation for Intermediate Networking Devices

1. A system, comprising: a service controller comprising at least one processor, the service controller capable of communicating with a service processor on a first end user device over a wireless access network, the at least one processor capable of at least assisting to provision a forwarding service, the forwarding service enabling the first end user device to forward data traffic between the wireless access network and one or more other end user devices according to a forwarding policy, the first end user device including a user interface capable of receiving a user input regarding a change to the forwarding service and further including a device agent capable of communicating a user instruction corresponding to the user input to the service controller, the at least one processor configured to execute one or more machine-executable instructions that, when executed by the at least one processor, cause the at least one processor to: receive the user instruction from a device agent on the first end user device over the wireless access network; apply at least a portion of the forwarding policy, the at least a portion of the forwarding policy for controlling usage of the forwarding service by at least a subset of the one or more other end user devices; obtain a measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices; and send an accounting record to a billing system, the accounting record being based on the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices; and a communication interface enabling the service controller to communicate with the first end user device over the wireless access network.

2. The system of claim 1 , wherein the user instruction comprises a directive to activate or deactivate the forwarding service.

3. The system of claim 1 , wherein, when executed by the at least one processor, the one or more machine-executable instructions further cause the at least one processor to: initiate provisioning of one or more functions based on a service plan associated with the first end user device.

4. The system of claim 3 , wherein the one or more functions comprise the first end user device.

5. The system of claim 3 , wherein the one or more functions comprise at least a portion of the service processor.

6. The system of claim 1 , wherein, when executed by the at least one processor, the one or more machine-executable instructions further cause the at least one processor to notify a user of the first end user device of an option to activate the forwarding service.

7. The system of claim 1 , wherein, when executed by the at least one processor, the one or more machine-executable instructions further cause the at least one processor to initiate provisioning of one or more functions based on a service plan associated with the first end user device.

8. The system of claim 1 , wherein, when executed by the at least one processor, the one or more machine-executable instructions further cause the at least one processor to determine a policy setting associated with the forwarding service.

9. The system of claim 8 , wherein the policy setting establishes whether the forwarding service is active, available, or enabled.

10. The system of claim 1 , further comprising the billing system, and wherein the billing system is configured to bill a user for the forwarding service.

11. The system of claim 1 , wherein obtaining the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices comprises receiving the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices from the device agent.

12. The system of claim 1 , wherein obtaining the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices comprises determining the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices.

13. A method performed by a service controller of a network system, the service controller comprising one or more processors, the service controller capable of communicating with a service processor on a first end user device over a wireless access network, the method comprising: receiving an instruction from a device agent on the first end user device, the instruction being based on a user input obtained through a user interface of the first end user device, the user input requesting a change to a forwarding service, the forwarding service enabling the first end user device to forward data traffic between the wireless access network and one or more other end user devices according to a forwarding policy; applying at least a portion of the forwarding policy, the at least a portion of the forwarding policy for controlling usage of the forwarding service by at least a subset of the one or more other end user devices; obtaining a measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices; and sending an accounting record to a billing system, the accounting record being based on the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices.

14. The method of claim 13 , wherein the instruction comprises a directive to enable or disable the forwarding service.

15. The method of claim 13 , wherein the instruction indicates a user intention to enable or activate the forwarding service.

16. The method of claim 13 , wherein the instruction comprises an indication of a user acknowledgment.

17. The method of claim 13 , wherein the instruction comprises an indication of a service plan selection.

18. The method of claim 13 , wherein the instruction comprises an indication of a user intention to modify at least an aspect of a service plan associated with the first end user device.

19. The method of claim 13 , wherein the instruction comprises an indication of a limit associated with the usage of the forwarding service by the at least a subset of the one or more other end user devices.

20. The method of claim 13 , further comprising initiating provisioning of one or more elements based on a service plan associated with the first end user device.

21. The method of claim 20 , wherein the one or more elements comprise the billing system.

22. The method of claim 20 , wherein the one or more elements comprise a gateway, a router, or a server.

23. The method of claim 20 , wherein initiating provisioning of one or more elements based on the service plan associated with the first end user device comprises sending information associated with the forwarding service to the first end user device.

24. The method of claim 23 , wherein the information associated with the forwarding service instructs the device agent on the first end user device to modify at least one device setting of the first end user device, the at least one device setting of the first end user device for enabling the forwarding service.

25. The method of claim 23 , wherein the information associated with the forwarding service allows the first end user device to enable the forwarding service.

26. The method of claim 23 , wherein the information associated with the forwarding service establishes how many of the one or more other end user devices are authorized to use the forwarding service.

27. The method of claim 23 , wherein the information associated with the forwarding service assists the first end user device to control the usage of the forwarding service by the at least a subset of the one or more other end user devices.

28. The method of claim 23 , wherein the information associated with the forwarding service assists the first end user device to control whether the forwarding service is active, enabled, or available to the one or more other end user devices.

29. The method of claim 23 , wherein the wireless access network is a first wireless access network, and wherein the information associated with the forwarding service assists the first end user device to detect availability of one or more access networks on which to use the forwarding service, the one or more wireless access networks including the wireless access network.

30. The method of claim 23 , wherein the information associated with the forwarding service assists the first end user device to enable or disable the forwarding service for the at least a subset of the one or more other end user devices.

31. The method of claim 23 , wherein the information associated with the forwarding service is based at least in part on whether the wireless access network is a home network or a roaming network.

32. The method of claim 23 , wherein the information associated with the forwarding service indicates whether a particular device of the one or more other end user devices is allowed to use the forwarding service.

33. The method of claim 23 , wherein the information associated with the forwarding service assists the first end user device to execute an authentication process.

34. The method of claim 23 , wherein the information associated with the forwarding service instructs the first end user device to direct or route traffic associated with the forwarding service to a particular logical or physical channel.

35. The method of claim 23 , wherein the information associated with the forwarding service comprises an indication of a cost associated with the forwarding service.

36. The method of claim 23 , wherein the information associated with the forwarding service assists the first end user device to route or direct traffic associated with the forwarding service.

37. The method of claim 13 , further comprising storing information associated with the instruction in memory.

38. The method of claim 13 , further comprising establishing, in cooperation with the device agent on the first end user device, a service control link between the service processor and the service controller, the service control link secured by an encryption protocol and configured to support control-plane communications between the service processor and the service controller, and wherein receiving the instruction from the device agent on the first end user device over the wireless access network comprises receiving the instruction over the service control link.

39. The method of claim 13 , further comprising determining that the usage of the forwarding service by the at least a subset of the one or more other end user devices is not in compliance with the forwarding policy.

40. The method of claim 39 , further comprising taking an action based on determining that the usage of the forwarding service by the at least a subset of the one or more other end user devices is not in compliance with the forwarding policy.

41. The method of claim 40 , wherein the action comprises restricting or blocking at least a portion of traffic associated with the first end user device, or directing the at least a portion of traffic associated with the first end user device to a quarantine service or server.

42. The method of claim 40 , wherein the action comprises sending information to the first end user device, or causing a notification to be sent to an administrator or a user.

43. The method of claim 39 , wherein determining that the usage of the forwarding service by the at least a subset of the one or more other end user devices is not in compliance with the forwarding policy comprises: determining that the forwarding policy does not authorize usage of the forwarding service; and determining that the forwarding service is being used by or is available to at least a portion of the one or more other end user devices.

44. The method of claim 13 , further comprising providing a notification to the first end user device.

45. The method of claim 44 , wherein the instruction from the device agent on the first end user device is in response to the notification.

46. The method of claim 44 , wherein providing the notification to the first end user device comprises: obtaining information from a network element; generating the notification based on the information from the network element; and sending the notification to the first end user device.

47. The method of claim 44 , wherein the notification provides information about the forwarding service.

48. The method of claim 44 , wherein the notification provides service usage information.

49. The method of claim 44 , wherein the notification comprises the measure of usage of the forwarding service by the at least a subset of the one or more other end user devices.

50. The method of claim 44 , wherein the notification comprises a forwarding service offer.

51. The method of claim 50 , wherein the instruction from the device agent on the first end user device comprises a response to the forwarding service offer.

52. The method of claim 44 , wherein the notification comprises an offer for a service plan comprising the forwarding service.

53. The method of claim 52 , wherein the instruction from the device agent on the first end user device comprises a response to the offer for the service plan comprising the forwarding service.

54. The method of claim 44 , wherein the notification indicates a forwarding service payment term.

55. The method of claim 54 , wherein the instruction from the device agent on the first end user device indicates that a user has accepted or authorized the forwarding service payment term.

56. The method of claim 55 , further comprising sending a message to a network element, the message indicating that the user has accepted or authorized the forwarding service payment term.

57. The method of claim 44 , wherein the notification comprises an offer to enable or activate the forwarding service.

58. The method of claim 44 , wherein the notification comprises an offer to enable or activate the forwarding service, and wherein the instruction from the device agent on the first end user device is in response to the notification.

59. The method of claim 44 , wherein the notification indicates that the forwarding service is active, enabled, or available.

60. The method of claim 44 , wherein the notification indicates a type of the wireless access network.

61. The method of claim 60 , wherein the type of the wireless access network comprises home, cellular, roaming, or a combination of these.

62. The method of claim 44 , wherein the notification indicates that usage of the forwarding service is associated with a cost.

63. The method of claim 13 , further comprising obtaining information from the first end user device.

64. The method of claim 63 , wherein the information from the first end user device comprises a signature, a certificate, a hash, or a configuration associated with a software component on the first end user device.

65. The method of claim 63 , wherein the information from the first end user device comprises information to assist in billing a subscriber for usage of the forwarding service.

66. The method of claim 63 , wherein the information from the first end user device comprises the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices.

67. The method of claim 13 , wherein controlling usage of the forwarding service by the at least a subset of the one or more other end user devices comprises allowing, blocking, restricting, delaying, redirecting, quarantining, or throttling one or more data communications associated with the forwarding service.

68. The method of claim 13 , wherein controlling usage of the forwarding service by the at least a subset of the one or more other end user devices comprises restricting one or more data communications associated with the forwarding service when the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices satisfies a condition relative to a threshold.

69. The method of claim 68 , wherein the threshold is a limit.

70. The method of claim 68 , wherein the instruction from the device agent on the end user device indicates the condition, the threshold, or both the condition and the threshold.

71. The method of claim 68 , wherein controlling usage of the forwarding service by the at least a subset of the one or more other end user devices comprises restricting how many of the one or more other end user devices are authorized to use the forwarding service.

72. The method of claim 13 , wherein obtaining the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices comprises receiving the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices from the device agent.

73. The method of claim 13 , wherein obtaining the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices comprises determining the measure of the usage of the forwarding service by the at least a subset of the one or more other end user devices.